Change custom behavioral rules and YARA scanner files

Add and change the rules in custom behavioral rules and YARA scanner files.

Task

  1. Log on to the Advanced Threat Defense web interface.
  2. Click ManageImage & Software Incremental Updates.
  3. Click the YARA Rules tab.
  4. To download the file from the Advanced Threat Defense database onto your client, click the File Name link.
  5. Open the file that you downloaded in a text editor, make your changes, then save the file.
  6. On the Incremental Updates page, click Browse, locate and open the file, then click Upload.